RBAC Databases and the Name Service

The name service scope of the RBAC databases can apply to the
local host only. The scope can also include all hosts that are served by a
name service such as NIS, NIS+, or LDAP. Which
name service has precedence is set for each of the databases in the /etc/nsswitch.conf file.

auth_attrentry – Sets the name service precedence for the auth_attr database.

passwdentry – Sets
the name service precedence for the user_attr database.

prof_attrentry – Sets the name service precedence for the prof_attr database.
Also sets the name service precedence for the exec_attr database.

For example, if a command with security attributes is assigned
to a rights profile that exists in two name service scopes, only the entry
in the first name service scope is used.